Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202496.roa
File: AS202496.roa (raw, json)
Hash identifier: ZP99Qsfrx2EPMsyO+fmdMmpPGrT2Nw3dKke3GjlZCl8=
Subject key identifier: 1B:E4:E0:95:D6:7E:9A:11:A4:AA:BD:CE:B4:D8:7A:C1:0B:4C:6F:A7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 311381F3B87C70BD595CF57D4133D120EE567EF5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202496.roa
Signing time: Thu 12 Jun 2025 14:16:36 +0000
ROA not before: Thu 12 Jun 2025 14:11:36 +0000
ROA not after: Thu 11 Jun 2026 14:16:36 +0000
asID: 202496
IP address blocks: 2a0a:a605::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 01:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:13:81:f3:b8:7c:70:bd:59:5c:f5:7d:41:33:d1:20:ee:56:7e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 12 14:11:36 2025 GMT
Not After : Jun 11 14:16:36 2026 GMT
Subject: CN=1BE4E095D67E9A11A4AABDCEB4D87AC10B4C6FA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:a8:bb:29:3e:73:32:41:18:60:e1:de:df:
11:ce:79:0e:90:b8:34:66:b5:cd:67:98:a7:20:c7:
7b:3a:88:17:f0:27:c2:ed:10:88:93:3b:07:cb:bd:
13:ce:44:e4:85:92:87:80:f5:95:97:d6:13:9e:f8:
78:95:58:a8:2a:77:4a:59:18:ac:80:6c:82:44:a6:
a2:b4:8f:04:da:cc:27:2f:79:03:71:8d:5f:8b:49:
93:76:38:6d:11:41:b7:b5:57:90:19:ae:75:72:66:
3d:65:9c:a1:45:12:20:69:c8:b9:2e:26:18:45:e8:
3a:64:1d:d9:58:09:16:0d:8a:35:a9:92:44:f9:29:
bb:a4:9c:bc:96:6f:d4:12:39:56:e5:d3:98:9f:c7:
6f:ee:48:b5:ae:0f:35:4d:51:07:20:91:5b:a8:1b:
52:79:b9:dd:e9:a2:77:e3:26:a9:40:ad:62:43:a9:
dc:87:2a:fa:76:89:ee:89:d5:6f:13:85:6b:50:13:
34:ee:11:f4:14:8d:0a:0d:57:dc:d1:8d:15:2e:bf:
fc:2e:11:66:70:b1:af:61:1a:e7:76:bd:65:02:6b:
81:9e:0b:54:bb:5f:5b:b7:8a:8d:eb:e2:5c:42:74:
e8:ff:81:56:36:32:72:da:f9:19:6f:90:80:f7:0a:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:E0:95:D6:7E:9A:11:A4:AA:BD:CE:B4:D8:7A:C1:0B:4C:6F:A7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202496.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:a605::/32
Signature Algorithm: sha256WithRSAEncryption
77:0c:43:1f:5a:5e:66:99:35:2c:c1:b3:5b:2d:fa:60:89:10:
d3:3f:69:bb:b4:dd:b3:f4:bb:35:5e:f7:a5:8b:82:3c:c1:cb:
70:a1:ac:03:c5:37:3a:dc:2b:99:36:9d:4c:c2:f4:87:00:05:
00:87:d8:85:8f:59:ac:08:e3:87:7a:0b:84:50:74:63:29:27:
10:82:aa:cc:5f:b8:a0:c2:84:28:f4:f9:cf:95:80:d1:be:23:
f9:21:d8:94:63:c8:29:14:df:d9:6d:56:7c:45:3d:96:a2:35:
0a:45:e4:d5:8f:1d:08:20:a3:cd:8c:e8:83:de:e7:ef:ed:55:
5f:b1:56:61:f7:3b:c4:8c:4d:5f:e4:94:a3:eb:42:1d:07:8e:
ad:8b:a8:92:04:66:e3:a9:77:a6:30:28:fc:ea:c7:26:27:da:
bc:4a:3d:1d:0a:2d:f4:84:37:96:f7:82:cc:18:d1:02:25:ed:
24:fa:63:63:fc:08:c8:22:0a:b9:0c:77:27:ba:d5:a4:3a:af:
90:fe:0c:10:e4:67:23:11:43:00:49:25:79:9a:72:3e:e2:23:
26:e3:03:e0:82:54:8c:20:af:71:a9:39:e4:75:18:3a:49:e6:
10:f7:a3:0d:55:14:b2:88:cc:25:af:8b:6e:c5:27:b0:5c:6a:
6c:2d:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 16:35:10 2025 by rpki-client